fw-review

SUSPICIOUS: the core review behavior is largely consistent with the stated purpose and uses same-org tooling, but the skill’s silent execution model, hidden metadata writes, and ability to trigger transitive skill installation make its footprint broader and less transparent than a simple reviewer. This looks more like a workflow-integrated internal tool than malware, but it carries medium security risk.